This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/323830343a366365303a3a2f33322d3332203d3e20323730343938.roa
File:                     323830343a366365303a3a2f33322d3332203d3e20323730343938.roa (raw, json)
Hash identifier:          vvscrxtpeAJHGMHI4uj5baf7zciFYAvXmSjgaveo8mI=
Subject key identifier:   7A:2C:9D:4C:7F:96:AC:06:1D:5F:A2:DC:36:3A:35:6A:A1:61:61:88
Certificate issuer:       /CN=B487F45E78D59DF1F45590F19639DB670B31088D
Certificate serial:       3967923EB79C5CC8450216EC68A935780C960D25
Authority key identifier: B4:87:F4:5E:78:D5:9D:F1:F4:55:90:F1:96:39:DB:67:0B:31:08:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/323830343a366365303a3a2f33322d3332203d3e20323730343938.roa
Signing time:             Mon 05 Jan 2026 13:53:41 +0000
ROA not before:           Mon 05 Jan 2026 13:48:41 +0000
ROA not after:            Mon 04 Jan 2027 13:53:41 +0000
asID:                     270498
IP address blocks:        2804:6ce0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.crl
                          rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 18:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:67:92:3e:b7:9c:5c:c8:45:02:16:ec:68:a9:35:78:0c:96:0d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B487F45E78D59DF1F45590F19639DB670B31088D
        Validity
            Not Before: Jan  5 13:48:41 2026 GMT
            Not After : Jan  4 13:53:41 2027 GMT
        Subject: CN=7A2C9D4C7F96AC061D5FA2DC363A356AA1616188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:2f:e6:81:a5:0b:ab:dd:8e:20:87:db:5d:
                    bb:41:7e:e1:6f:6a:e5:44:08:00:5b:46:1f:5c:fc:
                    55:af:5b:ac:0c:f1:32:c6:7f:57:42:f0:88:ce:60:
                    c3:89:d7:b4:2b:a7:eb:3f:6a:ff:a6:c1:04:56:bb:
                    c8:ff:a6:0d:7b:e0:58:3d:96:46:8a:65:5f:66:1d:
                    4f:40:17:80:13:e7:57:08:7b:39:c7:cb:88:54:0f:
                    e5:bc:6e:c3:4c:19:09:26:6b:81:a5:cd:df:19:f0:
                    3c:74:0f:ae:7f:e5:77:40:49:b4:6f:d8:23:89:84:
                    25:11:fc:4a:7d:26:3b:58:48:26:27:54:fc:44:5e:
                    7c:02:53:65:db:bd:f6:83:b6:25:cb:bb:d1:71:9d:
                    4c:51:ee:93:8a:3c:a8:7e:fa:ee:13:20:1c:0e:eb:
                    18:19:84:bb:d9:2b:c3:f8:a7:2c:c2:1c:ca:ef:53:
                    1e:48:1c:90:56:ab:93:09:0b:03:77:24:aa:c3:de:
                    34:62:45:46:c5:bf:d7:b6:0b:8c:8a:8f:a0:7b:5d:
                    72:cf:53:e8:e3:8d:d3:d3:8a:56:0b:d2:d1:25:bf:
                    8f:04:f8:80:2c:61:13:be:93:6b:bd:e7:0d:5d:56:
                    8d:46:6c:64:8e:3d:86:96:b3:67:ad:60:33:3f:0b:
                    58:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2C:9D:4C:7F:96:AC:06:1D:5F:A2:DC:36:3A:35:6A:A1:61:61:88
            X509v3 Authority Key Identifier:
                keyid:B4:87:F4:5E:78:D5:9D:F1:F4:55:90:F1:96:39:DB:67:0B:31:08:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/323830343a366365303a3a2f33322d3332203d3e20323730343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:32:9f:83:cb:2e:e2:de:11:78:9b:38:85:60:b4:8f:b9:a5:
         1f:3c:13:b8:9b:48:24:6a:ff:96:f8:73:ff:bb:28:02:06:f2:
         ea:84:8b:f4:6a:f5:55:c0:67:eb:8d:32:07:3b:f0:5b:28:32:
         f2:b8:a3:8b:41:90:ae:43:09:a2:a1:5f:a1:22:8b:fd:23:f2:
         29:90:55:21:6e:a7:3c:24:0d:22:54:1b:19:c2:f7:f5:4c:3d:
         cc:14:46:32:f5:ab:de:0c:07:6f:ab:e4:f1:79:03:35:31:13:
         09:c4:71:57:cf:77:9d:f6:bc:4d:ef:32:be:96:57:d9:74:fc:
         75:6c:c9:35:77:54:08:a1:d8:4c:c0:a0:c6:04:f5:cd:32:2e:
         2a:5a:af:f0:79:62:dd:74:84:31:6c:91:53:55:28:2b:99:e4:
         2e:aa:c5:37:d0:37:d3:9e:f5:a0:03:08:5a:e3:e7:ec:b8:d8:
         dc:99:7a:69:f2:37:db:ca:59:62:95:b5:bd:89:74:53:91:c3:
         75:57:fb:bc:72:1b:0e:dd:09:51:9e:02:08:04:c2:22:9c:2c:
         7b:b6:e9:46:d3:ee:af:10:69:8d:57:13:21:25:d3:e1:cb:78:
         84:51:5b:30:20:43:76:46:a0:cd:e2:21:db:d3:a8:f4:e1:2d:
         42:15:43:5a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOWeSPrecXMhFAhbsaKk1eAyWDSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ4N0Y0NUU3OEQ1OURGMUY0NTU5MEYxOTYzOURCNjcw
QjMxMDg4RDAeFw0yNjAxMDUxMzQ4NDFaFw0yNzAxMDQxMzUzNDFaMDMxMTAvBgNV
BAMTKDdBMkM5RDRDN0Y5NkFDMDYxRDVGQTJEQzM2M0EzNTZBQTE2MTYxODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Ry/mgaULq92OIIfbXbtBfuFv
auVECABbRh9c/FWvW6wM8TLGf1dC8IjOYMOJ17Qrp+s/av+mwQRWu8j/pg174Fg9
lkaKZV9mHU9AF4AT51cIeznHy4hUD+W8bsNMGQkma4Glzd8Z8Dx0D65/5XdASbRv
2COJhCUR/Ep9JjtYSCYnVPxEXnwCU2XbvfaDtiXLu9FxnUxR7pOKPKh++u4TIBwO
6xgZhLvZK8P4pyzCHMrvUx5IHJBWq5MJCwN3JKrD3jRiRUbFv9e2C4yKj6B7XXLP
U+jjjdPTilYL0tElv48E+IAsYRO+k2u95w1dVo1GbGSOPYaWs2etYDM/C1h3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUeiydTH+WrAYdX6LcNjo1aqFhYYgwHwYDVR0j
BBgwFoAUtIf0XnjVnfH0VZDxljnbZwsxCI0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkdqS2hDUGNwblZZQW9NQjRxdk0xUXVXdEZqM0hVQlpWSENLa0dac1Jv
M04vMC9CNDg3RjQ1RTc4RDU5REYxRjQ1NTkwRjE5NjM5REI2NzBCMzEwODhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0ODdGNDVFNzhENTlERjFG
NDU1OTBGMTk2MzlEQjY3MEIzMTA4OEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZHaktoQ1BjcG5WWUFvTUI0cXZNMVF1V3RGajNIVUJaVkhDS2tHWnNSbzNOLzAv
MzIzODMwMzQzYTM2NjM2NTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzQzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARs4DANBgkqhkiG9w0BAQsFAAOCAQEANDKfg8su
4t4ReJs4hWC0j7mlHzwTuJtIJGr/lvhz/7soAgby6oSL9Gr1VcBn640yBzvwWygy
8riji0GQrkMJoqFfoSKL/SPyKZBVIW6nPCQNIlQbGcL39Uw9zBRGMvWr3gwHb6vk
8XkDNTETCcRxV893nfa8Te8yvpZX2XT8dWzJNXdUCKHYTMCgxgT1zTIuKlqv8Hli
3XSEMWyRU1UoK5nkLqrFN9A30571oAMIWuPn7LjY3Jl6afI328pZYpW1vYl0U5HD
dVf7vHIbDt0JUZ4CCATCIpwse7bpRtPurxBpjVcTISXT4ct4hFFbMCBDdkagzeIh
29Oo9OEtQhVDWg==
-----END CERTIFICATE-----
Generated at Sun Jan 11 03:00:55 2026 by rpki-client